Over 1 million tech questions and answers.

Movie Pass take it away

Q: Movie Pass take it away

yeah this movie pass has been here for a while on my pc and i just ignored it and now its just annoying and i need to get rid of it ty

RELEVANCY SCORE 200
Preferred Solution: Movie Pass take it away

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Movie Pass take it away

Read other 11 answers
RELEVANCY SCORE 58.8

I have downloaded "hijackthis" and followed one of your tech's instruction to another post. Here are my results:

Logfile of HijackThis v1.99.1
Scan saved at 11:42:40 PM, on 4/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenge... Read more

A:movie pass tv pop-up

Download Cleanup from Here
A window will open and choose SAVE, then DESKTOP as the destination.
On your Desktop, click on Cleanup40.exe icon.
Then, click RUN and place a checkmark beside "I Agree"
Then click NEXT followed by START and OK.
A window will appear with many choices, keep all the defaults as set when the Slide Bar to the left is set to Standard Quality.
Click OK
DO NOT RUN IT YET

Download the trial version of Ewido Security Suite here.
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet. You will do that later in safe mode.
Click here for info on how to boot to safe mode if you don't already know how.
Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
Restart your computer into safe mode now. Perform the following steps in safe mode:
Run Cleanup:
Click on the "Cleanup" button and let it run.
Once its done, close the program.
Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report butto... Read more

Read other 1 answers
RELEVANCY SCORE 58.8

how can i remove this movie pass .tv pop up from my start up?
 

A:pop up movie pass.tv

Read other 7 answers
RELEVANCY SCORE 58.8

i am having the same problem with this movie pass pop up. i have downloaded hi jack software, but no i have a saved log and dont know what to do with it.
 

A:movie pass.tv

Hi, Welcome to TSG!!

Post your log in this thread and I'll be happy to help you.
 

Read other 1 answers
RELEVANCY SCORE 58.8

How do I remoive this problem. I didn't download anything from them yet they are asking me to pay for something that I didn't order.

Thanks
 

A:Movie Pass

Read other 8 answers
RELEVANCY SCORE 58.8

Logfile of HijackThis v1.99.1
Scan saved at 11:26:56 PM, on 4/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\License_Manager\license_manager.exe
C:\Program Files\Common Files\AOL\1124503619\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1124503619\ee\AOLServiceHost.exe
C:\Program Files\Common Files\AOL\1124503619\ee\AOLServiceHost.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Pro... Read more

A:movie pass

i need to get rid of the movie pass .tv pop up. Ive done the hi jack thing and have copied and pasted the results.. now im not sure what to do.
 

Read other 2 answers
RELEVANCY SCORE 58.8

Microsoft Windows XP Pro
Version 2002
Service pack 2
[email protected]
504Mb ram
Can't seem to get ride of movie pass. Need help. Have some computer skills thanks.
 

A:movie pass

Read other 8 answers
RELEVANCY SCORE 58.8

Hi, I read a reply to someone else's problem with this pop up and I followed your directions, so I have no copied a bunch of stuff from that note pad, here it is. I believe you are going to look at this and help me out, please help, this drives me nuts! Mike

Logfile of HijackThis v1.99.1
Scan saved at 12:23:11 PM, on 4/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
c:\program files\mcafee.com\agent\mcdetect.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
C:\WINDOWS\System32\DSentry.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\mm_tray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe
C:\Program Files\Winamp3\winampa.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Viewpoint\Viewpoint Mana... Read more

A:Movie tv pass

Read other 16 answers
RELEVANCY SCORE 58.8

this is what i copied from the HijackThis program, and i dont know what to delete/ do to get rid of Moviepass.tv:

Logfile of HijackThis v1.99.1
Scan saved at 9:29:17 PM, on 4/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr_.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Notify\notify.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hp... Read more

A:movie pass .tv

Welcome to TSG

Click here to download the trial version of Ewido Security Suite:
http://www.ewido.net/en/download/

Install Ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido.
It will prompt you to update click the OK button and it will go to the main screen.
On the left side of the main screen click update.
Click on Start and let it update.
DO NOT run a scan yet.

Restart your computer into Safe Mode now.
(Start tapping the F8 key at Startup, before the Windows logo screen).
Perform the following steps in Safe Mode:

* Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK.
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop.

Reboot.

Post a new Hijack This log and the results of the Ewido scan.
 

Read other 1 answers
RELEVANCY SCORE 58.8

how do i get the movie pass pop up removed?
 

A:movie pass

Hi, Welcome to TSG!!

Click here to download HJTsetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 3 answers
RELEVANCY SCORE 58.8

hello, i would like to know how i can to delete the pop up of movie pass tv, here i show mi request.
Logfile of HijackThis v1.99.1
Scan saved at 18:24:00, on 01/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Archivos de programa\Eset\nod32krn.exe
C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\vsnpstd.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\Archivos de programa\Microsoft AntiSpyware\gcasServ.exe
C:\Archivos de programa\Ahead\InCD\InCD.exe
C:\Archivos de programa\Eset\nod32kui.exe
C:\Archivos de programa\Notify\notify.exe
C:\Archivos de programa\Winamp\winampa.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\Archivos de programa\eMule\emule.exe
C:\Archivos de programa\Microsoft AntiSpyware\gcasDtServ.exe
C:\Archivos de programa\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Archivos de programa\Pinnacle\Shared Files\Programs\Scheduler\PCLESchedul... Read more

A:movie pass tv

Hi and welcome

Click here to download the trial version of Ewido Security Suite:
http://www.ewido.net/en/download/

Install Ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido.
It will prompt you to update click the OK button and it will go to the main screen.
On the left side of the main screen click update.
Click on Start and let it update.
DO NOT run a scan yet.

Restart your computer into Safe Mode now.
(Start tapping the F8 key at Startup, before the Windows logo screen).
Perform the following steps in Safe Mode:

* Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK.
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop.

Reboot.

Post a new Hijack This log and the results of the Ewido scan.
 

Read other 1 answers
RELEVANCY SCORE 58.8

Hello;

I was wondering how to get rid of moviepass from coming on my computer. Its annoying, thank you
 

A:Movie Pass

Welcome to TSG

* Click here to download HJTsetup.exe.
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 1 answers
RELEVANCY SCORE 58.8

How do I delete "movie pass"?
 

A:movie pass

Read other 10 answers
RELEVANCY SCORE 58.4

Recently I have been plagued by Movie Pass advertising software. A screen pops up saying that a 3 day trial has ended, followed by screens in Italian (I am located in Rome). The only way out of it is to use the CTR-ALT-DEL function and then end the task mp_notifier_060330b.

This task appears to have its origins in the subdirectory c:\program files\fsupport\ which contains the following files:
body.swf
kate.swf
notifier.exe
readout.mp3
soundtrack2.mp3
I have tried deleting and renaming files but it always recreates them.

Coincidentally and according to Norton Internet Security, I was being invaded by Trojans (e.g. Trojan.Bomka and Backdoor.Trojan) although this seems to have diminished in the last few days.

I have run a full Norton scan but it does not detect anything.

I have been reading the advice on your site and have run HiJack This. The following is the result:

Logfile of HijackThis v1.99.1
Scan saved at 7:37:40 AM, on 03/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Progra... Read more

A:Movie Pass plague!

Read other 12 answers
RELEVANCY SCORE 58.4

Hello, i just found the Movie Pass Virus on my computer, at first i thought it was a joke, but it's not it's real!!!! Can someone tell me how to remove it from my computer?

Here is my log file:

Logfile of HijackThis v1.99.1
Scan saved at 18:15:12, on 2006-04-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
c:\progra~1\mcafee\mcafee antispyware\massrv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WildTangent\Apps\GameChannel.exe
C:\WINDOWS\wt\updater\wcmdmgr.exe
C:\Program Files\Santa Cruz Networks\vSkype\vSkype.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.e... Read more

A:Movie Pass Virus

Read other 7 answers
RELEVANCY SCORE 58.4

Hello!
I have been inflicted with the dreaded movie pass prompter. I don't know how to remove it! If you could be of any assistance, I would greatly appreciate it!
 

A:Please help with removal of Movie Pass!

Read other 12 answers
RELEVANCY SCORE 58.4

My friend somehow got the program MoviePass on his computer and an annoying pop-up keeps coming about having to pay even though it was supposed to be a free trial. They say things about harming your credit rating and whatnot. While I know thats not true since no credit card info was entered, I still want to remove it for him. I went ahead and ran a Hijack This scan of the computer and this is what it looks like. Please let me know what do from there. Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 7:58:51 PM, on 04/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
c:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\LTMSG.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\P... Read more

A:Movie Pass Removal

Read other 7 answers
RELEVANCY SCORE 58.4

Originally Posted by billycooky
Hi, I am having trouble with that movie pass virus. I went to the panda site and scanned my system. It is showing that I still have a hacking tool in my system which is...hkey_classes_root\clsid\b3e19860_ocd5-4991_A066-4fcA2704de59. I don't know where to go in my computer to find this and I want to remove it. Do you know where it is located?... I also removed the License_manager file but it is still showing in my msconf where it shows the programs. How do I get this out of there? Also, when I start up my adware, it says a registry named license_manager is missing. I have to hit accept for the program to start. Do I need license_manager registry or is it the whole virus? Please help me with this.
Thanks, Bill
I have windows xp service pack 2.
 

A:movie pass virus

Read other 16 answers
RELEVANCY SCORE 58.4

brendandonhu said:

[tsg=yourewelcome]yourewelcome[/tsg]Click to expand...
I have also tried removing movie pass on my own but do not know if I was able to actually clean all the necessary files. Can someone please take a look at my hijack file and let me know if everything is in order? I would really appreciate that.

Thankyou

Logfile of HijackThis v1.99.1
Scan saved at 4:03:59 PM, on 4/21/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\PROGRA~1\FREEME~1\fmempro.exe
C:\Program Files\Common Files\Palo Alto Software\8.0\PAS8_Update.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Pa... Read more

A:tried removing movie pass

Read other 6 answers
RELEVANCY SCORE 58.4

i have had the movie pass virus since March and i'm going crazy. I registered here today, found the following instructions below, and below that I pasted the requested log. i have a dell pentium 4/windows xp.

Hopefuly i am not posting something i shouldn't, but i need help and I am excited the possibility of help is imminent. thank you.


Welcome to TSG

Click here to download HJTsetup.exe: http://www.thespykiller.co.uk/files/HJTSetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Logfile of HijackThis v1.99.1
Scan saved at 9:04:35 PM, on 7/31/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Expl... Read more

A:movie pass virus

Hi and welcome to TSG,
Go to Control Panel Add/Remove programs and remove any of these that you find there:

MovieLand
MediaPipe
AccessMedia or My Access Media
ItBill
MsMovies
P2Pnetworks
Moviepass licence manager
Notification Utility or Notify or Notifier
Download the trial version of Ewido Anti-spyware from HERE and save that file to your desktop. When the trial period expires it becomes freeware with reduced functions but still worth keeping.


Once you have downloaded Ewido Anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
Once the setup is complete you will need run Ewido and update the definition files.
On the main screen select the icon "Update" then select the "Update now" link.
Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine"
Under "Reports"
Select "Automatically generate report after every scan"
Un-Select "Only if threats were found"

Close Ewido Anti-spyware, Do NOT run a scan yet. We will do that later in safe mode.

Reboot your computer into Safe Mode now. You can do this by restarting your computer and continually tapping the F8 key until a m... Read more

Read other 1 answers
RELEVANCY SCORE 58.4

Logfile of HijackThis v1.99.1
Scan saved at 2:16:39 PM, on 4/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\PROGRA~1\NoPops\NoPopsGUI.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe
C:\Program Files\Dell Photo AIO Printer 942\memcard.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Notify\notify.exe
C:\Program Files\Dell Photo AIO Printer 942\dlbubmon.exe
C:\PROGRA~1\MUSICM~1\MUSICM~2\MMDiag.exe
C:\PROGRA~1\NoPops\NoPops.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\WeatherCast\Weather.exe
C:\Program Files\Common Files\AOL\1144333153\ee\AOLHostManager.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Logitech\Desktop Messenger\8876480... Read more

A:movie pass.tv popup

Hi, Welcome to TSG!!

I've moved your post to a new thread of your own so please reply here.

Go go add remove programs and remove these:
Logitech Desktop Messenger
WhenUSave
Media Gateway
SpywareStormer

Next:

Please download Webroot SpySweeper from here: http://www.webroot.com/consumer/products/spysweeper/index.html?acode=af1&rc=4129

(It's a 2 week trial.)

* Click the Free Trial link under "SpySweeper" to download the program.
* Install it. Once the program is installed, it will open.
* It will prompt you to update to the latest definitions, click Yes.
* Once the definitions are installed, click Options on the left side.
* Click the Sweep Options tab.
* Under What to Sweep please put a check next to the following:
o Sweep Memory
o Sweep Registry
o Sweep Cookies
o Sweep All User Accounts
o Enable Direct Disk Sweeping
o Sweep Contents of Compressed Files
o Sweep for Rootkits

o Please UNCHECK Do not Sweep System Restore Folder.

* Click Sweep Now on the left side.
* Click the Start button.
* When it's done scanning, click the Next button.
* Make sure everything has a check next to it, then click the Next button.
* It will remove all of the items found.
* Click Session Log in the upper right corner, copy everything in that window.
* Click the Summary tab and click Finish.
Paste the contents of the session log you copied into your next reply.
Also post a new Hijack This log.
 

Read other 1 answers
RELEVANCY SCORE 58.4

Help me remove movie pass
 

A:movie pass removal

You are being helped here: http://forums.techguy.org/security/430847-movieland.html
 

Read other 1 answers
RELEVANCY SCORE 58.4

How do I remove the movie pass pop up?? Everytime it pops up, I have to use Ctl+ alt + del to temporarily remove it. My OS is XP. Log file attached. Pls help.
 

A:Movie Pass Notifier Pop Up

Read other 10 answers
RELEVANCY SCORE 58.4

Can someone please help me to get rid of this? It would be much appreciated, thank you.
 

A:Movie Pass Virus

Read other 7 answers
RELEVANCY SCORE 58.4

i was reading about how to get rid of this and i can't seem to get it off the computer. heres the log...

Logfile of HijackThis v1.99.1
Scan saved at 5:28:09 PM, on 5/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adelphia HSAgent\bin\tgcmd.exe
C:\Program Files\Common Files\Real\Update_OB... Read more

A:movie pass tv removal

Run Hijack this scan only
Click the box to the left of these entries, close IE, click fix checked

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://sidesearch.dropspam.com/sidesearch.htm

O2 - BHO: NLS UrlCatcher Class - {AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} - C:\WINDOWS\system32\nvms.dll (file missing)

O4 - HKLM\..\Run: [DropSpam Lifestyle] "C:\Program Files\dslifestyle\dslifestyle.exe"

O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe

O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe "

O16 - DPF: {DECEAAA2-370A-49BB-9362-68C3A58DDC62} (SAIX) - http://static.zangocash.com/cab/Seek...40eadbd870f4a5
DownLoad http://www.downloads.subratam.org/KillBox.zip

Restart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:

Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time then click on the button that has the red circle with the X in the middle after you enter each file. It will ask for confimation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the "Paste Full Path of File to Delete" box.

C:\Program Files\dslifestyle
C:\Program Files\BullsEye Network
C:\Program Files\License_Manager
... Read more

Read other 3 answers
RELEVANCY SCORE 57.6

I have picked this bloody thing up and am having trouble removing it.

I followed some of the removal steps in other threads on this issue and presently have Ewido, Killbox, Panda Active Scan and Hijack This downloaded.

Presently I am not getting the Movie pass window, I am getting regular script errors associated according to the error message with Movie pass and the program is still listed in my Add/Remove Program list but cannot be removed.

Anyway here is the HJT log...

Logfile of HijackThis v1.99.1
Scan saved at 10:04:48 AM, on 4/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton Internet ... Read more

A:Movie Pass removal. (HJT log inside)

Hi, Welcome to TSG!!

What are the exact script errors?

Go to Add/Remove Programs via the Control Panel and remove any of these that you find:
P2PNetworks
AltPayments
Download Manager
Media Pipe
My Access Media
Notify (there may also be numbers as part of the filename.
Notification Utility
License Manager

Go to your c:\Program files and delete these folders if they exist:

Movieland or Moviepass
AltPayments
Download Manager
Media Pipe
My Access Media
Notify
Notifier
Notification
Notification Utility
ITBills
License Manager
 

Read other 3 answers
RELEVANCY SCORE 57.6

Okay i have went into Safe mode, Ran complete scan with ewido i have also ran clean up...
Ive been trying at this for a week now, im frustrated. Ive seen how you handle others very fast and helpful, i would like the same. You guys are great at TSG!!

well heres the HGT.

Logfile of HijackThis v1.99.1
Scan saved at 6:29:33 PM, on 5/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Common Files\AOL\1138485025\ee\AOLSoftware.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\License_Manager\license_manager.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Syst... Read more

A:Guess what? I have movie pass too..help me im scared

Read other 7 answers
RELEVANCY SCORE 57.6

Gentlemen/women-

My computer has been infected by the lovely Movie Pass virus (among others, it seems), and I would greatly appreciate any and all assistance in eradicating the beast. I should disclose that I'm running Windows XP SP2 with Norton/Symantec, and I ran AdAware, CCleaner, Hijack This (see below) and the Kapersky Online Scanner (see below) upon discovering the infection. Intermittently, Norton will inform me it has blocked an attempt to change my browser's home page, but- other than an obvious "slow down" of operation pointing and clicking on the mouse- no noticeable side effects such as popups, etc. avail themselves.

I've attempted to remove the blatantly obvious adware/shareward via CClearner and Windows Add/Remove Programs; however, Kapersky suggests 3 viruses remain. I am, therefore, humbly requesting your assistance. Please find below logs for Kapersky + Hijack This. Thanks in advance for your time and assistance.

HJT:
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Commo... Read more

A:Solved: Movie Pass Virus

Read other 13 answers
RELEVANCY SCORE 57.6

I created a my LOg for HJT

Hi, I'm new here and I am very confused. I have had problems with movie pass. This advertisement kept popping up on my computer telling me the only way to stop these advertisements is to pay for a subscription then I could end subscription.
I had to use task manager to end the program every time it popped up to get it off my screen. I used Norton Internet Security and it said that moviepass is Trojan Horse but could not delete it. I did quarentine the files Norton detected.
I then went to Windows Live Safety Scanner and it found the files again and deleted some but said some files couldn't be deleted, however when I ran scan again it said it deleted all. The advertisements have stopped.
Today I was searching through my program files and found one file called Notifier which is empty but I shredded it anyway with Windows Washer.
I also found the file body,swf,kate.swf,notifier.exe,readout.mp3, I need to know if there is an easy way to remove this from my computer. I need help with this issue. Thank you so much! Sincerely, Confusedcompgirl
 

A:Solved: Movie Pass Plague

Read other 16 answers
RELEVANCY SCORE 57.6

Found your discussion on this topic but didn't want to assume everything was the same as for others. What Hijack finds is different depending on the user so I copied both Log files. There are some other suspicious items - or maybe it is just my suspicious nature!!!

So I need to get rid of the MP license Manager from User 2 and what is nwiz.exe /installquiet /keeploaded /nodetect ? Anything else "bugging" me?

I can send User1 's logfile if that would help - I couldn't do it this time - the total message was too long according to the error message.

Thanks

______________________________________________________
User 2

Logfile of HijackThis v1.99.1
Scan saved at 10:29:21 AM, on 4/28/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\system32\winlogon... Read more

A:Movie Pass License Manager and More

Hi artifelts

Welcome to TSG!

We will deal with the users seperately. When we finish with one, we'll deal with the other. It will be less confusing that way.
* Download the trial version of Ewido Security Suite here.
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
If you cannot download the updates, update manuallly according to the directions here.
DO NOT run a scan yet. You will do that later in safe mode.

* Click here for info on how to boot to safe mode if you don't already know how.
* Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
* Run Hijack This again and put a check by these. Close ALL windows except HijackThis and click "Fix checked"

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page... Read more

Read other 1 answers
RELEVANCY SCORE 57.6

I to have the movie pass softeware and pop ups i followed previous threads on how to do the scans and reports so here they are. I am not sure what to do now as i now they are still there... i am a rookie. i think the reports are in the attachments.
 

A:Solved: Movie Pass Reports Now What do i do???

Read other 16 answers
RELEVANCY SCORE 57.6

Joined tda becuz I read a prev post about removing movie Pass......your instruction was very good. May I show you here what the file revealed so I can proceed: (Not waiting for your answer-Hope that's OK)

Logfile of HijackThis v1.99.1
Scan saved at 1:26:50 AM, on 4/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\PROGRA~1\Iomega\System32\ActivityDisk.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\1102109368\ee\AOLSoftware.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\mcafee.com\agent\McAgent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files... Read more

A:Solved: Remove Movie Pass

Read other 16 answers
RELEVANCY SCORE 57.6

I have noticed multiple threads relating to this problem but I know each situation is different can some one please help me with this I wil download the hijack this program right now and post the results of the scan
 

A:Solved: MOvie pass popups

Read other 16 answers
RELEVANCY SCORE 57.6

Logfile of HijackThis v1.99.1
Scan saved at 7:37:32 PM, on 6/26/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\WINNT\System32\ScsiAccess.EXE
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\WINNT\wanmpsvc.exe
C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe
C:\WINNT\Explorer.EXE
C:\WINNT\GWMDMMSG.exe
C:\WINNT\System32\hkcmd.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
C:\PROGRA~1\COMETS~1\DM\bin\dmserver.exe
C:\Program Files\Common Files\CMEII\CMESys.exe
C:\Program Files\Common Files\AOL\1124385790\ee\AOLSoftware.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\ezula\mmod.exe
C:\Program Files\Trend Micro\OfficeScan Client\pccntupd.exe
C:\Program Files\Date Manager\DateManager.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
C:\Program Files\PrecisionTime\PrecisionTime.exe
c:\program files\common files\aol\1124385790\ee\aim6.exe
C:\Program Files\Linksys\Wireless-G Notebook Ada... Read more

A:Hijack This Log to Remove Movie Pass

go here for instructions..

http://www.schrockinnovations.com/removemoviepass.php
 

Read other 2 answers
RELEVANCY SCORE 57.6

Hi im really feeling down at the moment because somehow i seem to have got a virus on my computer called movie pass. i dont know how i got it but i want it removed off my compuer as i am still only a kid and cant afford to be sent a bill from this movie pass software! so heres what ive done, i have uninstalled the webcam service that came with it during the three day trial (using add/remove programs), then i did a virus scan with norton 2006 that didnt pick anything up but i also used lavasoft adware se and spybot search and destroy which quarantined/deleted some stuff including keyloggers. i still however know that i have a problem because i keep getting messages on my computer asking if i should continue running scripts and a movie pass url is given. i am not very good with computers but you guys are great, if you can help me i would be so happy and would be prepared to make a donation. Thanks, Pc Noob
 

A:Solved: Movie Pass Infestation!

Read other 13 answers
RELEVANCY SCORE 57.6

hey there,

i can't remove the movie pass licence agrement,

it's still in the add/remove programm window.
can some one please help me,

here's a log file from hjt:

Logfile of HijackThis v1.99.1
Scan saved at 11:58:06, on 7-6-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtS... Read more

A:movie pass licence manager

Hi and welcome to TSG,
If you knowingly signed up for MediaPipe/Moviepass/Movieland/Media Access then you need to call customer support to cancel your account immediately. Otherwise, you can just do the following:

Go to Control Panel Add/Remove programs and remove any of these that you find there:

MovieLand
MediaPipe
AccessMedia
ItBill
MsMovies
P2Pnetworks
Moviepass licence manager
Download the trial version of Ewido Anti-Malware here.
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet. You will do that later in safe mode.

If you are having problems with the updater, you can use this link to manually update ewido:

ewido manual updates
Click here for info on how to boot to safe mode.
Restart your computer into safe mode now. Perform the following steps in safe mode:
Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop

Restart back into Windows normally now.
Run ActiveScan online virus scan here

When the scan is finished, save the r... Read more

Read other 1 answers
RELEVANCY SCORE 56.8

Hi,
I am new to HiJack this. I have read other threads that explain removal of Movie Pass, but cannot find any of the files they say I should find: I have deleted three cookies and all temp Internet files. Also there is one file shown on the control panel, but it will not allow me to delete it, it just opens a web page.
here is my log:

Logfile of HijackThis v1.99.1
Scan saved at 10:28:38 PM, on 4/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\s... Read more

A:Solved: Movie Pass removal - sneaky

Hi, Welcome to TSG!!
Download the trial version of Ewido Security Suite here.
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet. You will do that later in safe mode.
Click here for info on how to boot to safe mode if you don't already know how.
Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
Restart your computer into safe mode now. Perform the following steps in safe mode:
Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop
Reboot to normal mode.
Move hijackthis into a permanent folder.

Post a new HijackThis log and the log from Ewido.
 

Read other 3 answers
RELEVANCY SCORE 56.8

Hello, I am new to the forum because I recently been a victim of Movie Pass! Argh! I am reading how to remove it and will try it soon.

However, I had a question. It claims that they can ruin your credit report but how can they if they do not have your credit card information? I hope that is an empty threat to get people to pay up for something they did not want in the first place.

I hope I can remove my pop-up soon.
 

A:Can Movie Pass Do Damage to Your Credit Report?

found this

Moviepass.tv has become an issue lately, please note the following by Amateur

The way Moviepass appears to operate is by installing itself on your computer and creating an account. If you're getting a pop-up message then it's safe to say that you do have an account, even if you weren't aware of it.

First, you MUST cancel that account before you remove the software from your PC. When you call them to cancel, they will ask you for a number from your software. If you have removed the software, they will not cancel your account.
This is important because when you installed the software (intentionally or not) you agreed to their terms of use. Possible that you can be hit with a $300 tab and a collection agency if you do not properly cancel.

If you phone Moviepass make a note of the date, time, the name of the person you spoke to and details of the conversation. If your phone has a record facility then record the conversation, ensure you advise Moviepass that the call is being recorded. Keep copies of all correspondence including e-mails. Save copies of webpages you visit on the Moviepass website (click File on the menu at the top of your browser window then click Save As).

Movieland and Moviepass are inextricably linked. The contact details specifically for Movieland are by e-mail to [email protected], by phone on US number: 866 431-7724 or by writing to Integrated Enterprises Inc, 19360 Rinaldi Street #148, Porter Ranch, CA 91326, United States... Read more

Read other 3 answers
RELEVANCY SCORE 56.8

Hi, there. Will someone help me please? A week ago a horrendous popup began appearing every time I use the Internet. It's the so called movie pass. I've read about it in this forum and I've tried to fix it myself following the directions for other people that are suffering the same problem. However I haven't been able to install one of the spykillers you recommend to do the cleaning (Ewido) because it only works with Windows XP and 2000. The operating system I'm using in my PC is Windows 98. Help, please.
 

A:mp_notifier Movie Pass is driving me crazy!

Read other 9 answers
RELEVANCY SCORE 56.8

Hi, For the past week I've been having problems with this really ignoying moviepass pop-up that says my three day trail has expired and that I need to purchase a subscription. I haven't downloaded anything lately, and have no idea wehere this file came from. I've been trying to locate the pop-up notifiers file (mp_notifier_060330b), but I haven't been able to locate it. I've read some other forums on this subject that said to download Hijack This... so pasted below is the scan results.

Any help in deleting and removing this problem would be greatly appriciated.

Thank you in advance,
Dominique

Scan Results below:

Logfile of HijackThis v1.99.1
Scan saved at 11:34:17 PM, on 07/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\sy... Read more

A:Solved: Help with mp_notifier movie pass popup

Read other 11 answers
RELEVANCY SCORE 56.8

Movie Pass.TV has found it's way onto my friends computer. I am trying to remove it for him like I did mine, but I can't find which entry it is. Can someone please tell me which entry to delete to do so.

As always, thank you guys very much for all your help.

HJT Log...
Logfile of HijackThis v1.99.1
Scan saved at 12:09:21 PM, on 5/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\... Read more

A:Solved: movie pass.TV - hijack this log posted- please take a look

Read other 9 answers
RELEVANCY SCORE 56.8

I know someone had this problem the other day but it appear as though the thread i gone. Can someone help me fix this? I have deleted the program from my computer but it is still popping up on my computer intermittently.

Please help!
 

A:How do I get rid of the movie pass tv notifier from popping up on my screen?

Read other 13 answers
RELEVANCY SCORE 56.4

From a month now i am struggling the annoying popup mp_notifier_060330b.It comes up in a folder called fsupport.I read some solutinon method in this techforoum.I had also downloaded the evido.I am attaching the result below:

Thanks in advance.
Santosh.

Scan report:

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 1:59:54 PM, 6/11/2006
+ Report-Checksum: 2273B16

+ Scan result:

HKLM\SOFTWARE\ISTsvc -> Adware.ISTBar : Cleaned with backup
HKLM\SOFTWARE\ISTsvc\history -> Adware.ISTBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc -> Adware.ISTBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Cleaned with backup
HKU\S-1-5-21-3192954827-1437242983-3915995201-1005\Software\IST -> Adware.ISTBar : Cleaned with backup
C:\Documents and Settings\santy\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv438.jar-78b6f9a-7aa041e7.zip/Dummy.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup
C:\Documents and Settings\santy\Cookies\[email protected][2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\santy\Cookies\[email protected][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\santy\Cookies\[email protected][1].txt -> TrackingCookie.Adbri... Read more

A:tried all methods of removing mp_notifier movie pass popup please help...

Read other 6 answers
RELEVANCY SCORE 50.4

a program called "moviepass.tv" keeps popping up a notifier which won't allow me to delete it. i can't find it in my system and i have tried to find it in add/remove programs to remove it. i get rid of the pop up by hitting control+alt+delete and then end process on the "notifier". surely there has to be a way to get rid of it permanently so it doesn't keep popping up. here is a copy of my hijack this log.... any help you can give me would be greatly appreciated.

i think i may know which one it is to delete it, but i don't want to do anything without proper approval. i think it is the "020- winlog notify"... please let me know what to do.

Logfile of HijackThis v1.99.1
Scan saved at 1:20:02 PM, on 3/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Digital Media Reader... Read more

A:Solved: "movie pass .tv" keeps popping up a notifier

Read other 7 answers
RELEVANCY SCORE 46.4

Hi All,
I tested the following attacks in Microsoft Advanced Threat Analytics and found them
not to be working.

Bruteforce Attack Pass-The-Ticket Pass-The-Hash Sensitive account exposed Using Plain-Text Authentication
I have tested other attacks like Reconnaissance
using DNS, Broken Trust, Honey Token account suspicious activities but they are working perfectly fine. I don't know
what's the issue with the above 4.
For
1. Bruteforce Attack:
I used thc-hydra-windows and triggered a dictionary attack using a list of passwords.

2. Pass-The-Ticket:
I used mimikatz to steal the kerberos ticket from a PC on which Admin is logged on. Impersonating an attacker, I copied the .kirbi file and Injected that file(using mimikatz again) to another PC on which a domain user is logged in.

3. Pass-The-Hash:
(Same as above)
4. Sensitive account exposed in plain text authentication:
I used mimikatz command 'sekurlsa :: logonpasswords' and was able to get passwords of all the users who logged on to that PC. But this was also not detected by MATA.

Please help me with the above issues. If possible, provide the tools using which I can trigger and detect those attacks.
Regards 

Read other answers
RELEVANCY SCORE 46.4

I'm getting the famous enter admin pass on boot (no BIOS update, laptop been off for a year (no OS atm) and I just started trying to fix it.  The error code I get is: [ 54549743 ] I hope that helps get my mobo unlocked!











Solved!
View Solution.

A:HP-2000 Enter Admin Pass/Power on Pass at Boot

@PoetheProgrammr? Enter    41421385 Regards, DP-K

Read other 2 answers